CVE-2026-24197

6.5 MEDIUM

NVIDIA Display Driver for Linux contains a vulnerability in the Multi-Instance GPU (MIG) partition management, where an insecure default ...

Published: 2026-05-26 · Last updated: 2026-06-11

Severity and scoring

CVSS: 6.5 MEDIUM
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
CWE: CWE-1188

Affected products

Vendor	Product
nvidia	gpu_display_driver

Description

NVIDIA Display Driver for Linux contains a vulnerability in the Multi-Instance GPU (MIG) partition management, where an insecure default initialization of memory subsystem routing resources could lead to data corruption or a hang during partition reconfiguration. A successful exploit of this vulnerability might lead to denial of service.

Source: NVD

References

[NVD]https://nvd.nist.gov/vuln/detail/CVE-2026-24197
[Other]https://nvd.nist.gov/vuln/detail/CVE-2026-24197
[Vendor advisory]https://nvidia.custhelp.com/app/answers/detail/a_id/5821
[Other]https://www.cve.org/CVERecord?id=CVE-2026-24197

Related CVEs

Same vendor

CVE-2026-24237 — NVIDIA NVTabular contains a vulnerability where an attacker could cause improper deserialization of untrusted data (7.8 HIGH)
CVE-2026-24221 — NVIDIA NVTabular contains a vulnerability where an attacker could cause improper deserialization of untrusted data (7.8 HIGH)
CVE-2026-24199 — NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where a user could cause a race condition by reordering comp... (4.7 MEDIUM)
CVE-2026-24196 — NVIDIA Display Driver for Linux contains a vulnerability where a user could cause an out-of-bounds read (7.1 HIGH)
CVE-2026-24195 — NVIDIA Display Driver for Linux contains a vulnerability in UVM, where a user could cause improper input validation (7.1 HIGH)

Same CWE

CVE-2026-46517 — LMDeploy is a toolkit for compressing, deploying, and serving large language models (7.8 HIGH)
CVE-2026-36616 — Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 contains hardcoded WiFi driver credentials including a RADIUS shared secret, WPS... (5.9 MEDIUM)
CVE-2026-36612 — Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 enables WPS 2.0 by default with a weak lockout policy (60-second lockout after 1... (6.4 MEDIUM)
CVE-2026-44825 — Hardcoded credentials in the Basic Authentication setup tool (bin/solr auth enable) in Apache Solr versions 9.4.0 through 9.10.1 and 10.0... (8.1 HIGH)
CVE-2026-9039 — A configuration weakness in the device’s remote management service allows an authenticated session to be established over a communication...